Activecampaign

Activecampaign

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2025-32136

  • EPSS 0.03%
  • Published 04.04.2025 16:15:21
  • Last modified 07.04.2025 14:18:15

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in activecampaign ActiveCampaign allows Stored XSS. This issue affects ActiveCampaign: from n/a through 8.1.16.

9.8

CVE-2024-32430

  • EPSS 0.31%
  • Published 15.04.2024 08:15:15
  • Last modified 02.04.2025 18:09:33

Server-Side Request Forgery (SSRF) vulnerability in ActiveCampaign.This issue affects ActiveCampaign: from n/a through 8.1.14.

5.4

CVE-2023-0233

Exploit
  • EPSS 0.09%
  • Published 15.05.2023 13:15:09
  • Last modified 14.01.2025 19:15:28

The ActiveCampaign WordPress plugin before 8.1.12 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Store...

4.3

CVE-2021-24133

Exploit
  • EPSS 0.1%
  • Published 18.03.2021 15:15:14
  • Last modified 21.11.2024 05:52:25

Lack of CSRF checks in the ActiveCampaign WordPress plugin, versions before 8.0.2, on its Settings form, which could allow attacker to make a logged-in administrator change API Credentials to attacker's account.